This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a3539383a3a2f33322d3438203d3e20323632393037.roa
File:                     323830343a3539383a3a2f33322d3438203d3e20323632393037.roa (raw, json)
Hash identifier:          RHWrtfAtedFePSL79bsF222uyzScpxSAZchf11pqAVA=
Subject key identifier:   CD:F5:AA:93:8B:47:55:D8:0B:07:66:2E:C8:3B:AC:0C:A8:3D:66:39
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       215BEF4AA0055D30D7709AF907D159715BBEA75F
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a3539383a3a2f33322d3438203d3e20323632393037.roa
Signing time:             Mon 19 Jan 2026 17:34:16 +0000
ROA not before:           Mon 19 Jan 2026 17:29:16 +0000
ROA not after:            Mon 18 Jan 2027 17:34:16 +0000
asID:                     262907
IP address blocks:        2804:598::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 18:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5b:ef:4a:a0:05:5d:30:d7:70:9a:f9:07:d1:59:71:5b:be:a7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Jan 19 17:29:16 2026 GMT
            Not After : Jan 18 17:34:16 2027 GMT
        Subject: CN=CDF5AA938B4755D80B07662EC83BAC0CA83D6639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:2b:14:42:cc:4c:14:32:17:72:8d:85:d9:
                    6a:92:39:b2:23:1f:ec:55:8c:ab:f6:51:cc:86:c1:
                    58:c4:fc:52:8b:3b:46:8a:d1:f0:cd:0f:62:19:22:
                    97:4a:9e:b3:b1:82:a2:09:f5:69:b1:d8:fb:f6:31:
                    22:5f:14:09:a3:3a:f5:9f:57:f8:9f:d4:f3:af:40:
                    3b:6c:a9:cc:11:20:fe:17:0d:24:0a:5c:7a:c9:22:
                    ae:2b:34:38:39:98:bc:46:c4:8d:5e:c8:74:58:dd:
                    b9:9e:14:1e:5c:7a:ab:06:08:cc:ef:98:2e:8a:23:
                    5b:e0:8a:a5:ef:63:f9:a0:72:51:49:d5:ac:49:b6:
                    7f:8a:f9:46:92:72:98:f0:ed:dd:af:af:57:56:3f:
                    3b:1e:b2:cf:62:a0:a3:4d:ee:55:4d:1e:85:34:99:
                    dc:1d:46:0f:10:cb:d1:65:8e:27:2c:78:1c:7e:93:
                    fa:78:6b:3e:f7:0e:8f:3c:85:3e:30:71:6e:bb:c6:
                    f8:c9:68:b2:6f:51:ba:0a:85:26:d7:9f:4d:3c:35:
                    f6:aa:03:29:15:bf:e2:f1:21:f8:79:6e:db:68:17:
                    9f:af:13:83:7f:8e:23:5c:fc:d8:6f:a3:f5:04:6c:
                    92:35:a7:36:ac:e5:38:0f:03:ed:70:1d:dd:b0:43:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F5:AA:93:8B:47:55:D8:0B:07:66:2E:C8:3B:AC:0C:A8:3D:66:39
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a3539383a3a2f33322d3438203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:598::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:69:11:e4:02:aa:7b:d4:8d:38:a0:07:dd:6b:5b:70:23:ec:
         35:5f:11:38:b4:6d:ef:a3:1d:06:e2:30:61:6b:65:7d:b4:11:
         ef:3d:97:01:55:36:80:61:73:e6:69:95:92:15:4c:4c:65:d8:
         29:eb:25:80:07:5b:b2:a5:73:0f:69:01:33:69:51:8d:ef:9f:
         a1:d3:20:ba:5a:d4:26:be:67:18:e4:f6:b4:0f:4f:d9:40:b8:
         37:73:00:ed:cc:20:a8:8e:e4:6c:51:7a:0d:df:06:74:9a:c0:
         bb:92:14:b3:7b:7c:c9:6a:be:2e:7c:54:0f:d1:fe:82:eb:72:
         5e:21:b3:fe:4d:15:80:f4:6c:f0:6f:ce:50:e0:46:e5:27:0b:
         d7:1f:29:8a:32:a2:7b:75:41:8e:34:a5:f6:78:f5:55:13:8d:
         3b:e7:ea:12:6e:9d:02:53:72:dc:5b:51:3d:fe:71:0a:cc:0c:
         43:c5:c6:f4:f3:68:ea:f4:03:63:b7:85:47:d5:2b:02:56:29:
         84:0a:94:d2:1a:b0:d4:0d:f0:10:30:c6:90:50:0c:8b:84:4d:
         30:34:d6:3f:ce:ba:e2:e9:a2:c9:d8:6d:c5:da:48:a4:81:c8:
         13:24:90:4a:93:bf:45:61:3f:45:64:c1:a8:dd:ca:18:90:a4:
         5b:9e:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:32:39 2026 by rpki-client